$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/E4205416B2F111EFBB14DE0FC4F9AE02.roa File: E4205416B2F111EFBB14DE0FC4F9AE02.roa (raw, json) Hash identifier: VFye1Dmoq1BwB6EiBXuSTI6+JgFfT1fZg/CcpOjt6ZM= Subject key identifier: B8:B3:24:0B:53:6E:02:D3:89:07:5B:C3:A8:43:31:30:35:45:95:5F Certificate issuer: /CN=A9183BBC/serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D Certificate serial: 0709 Authority key identifier: 06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/E4205416B2F111EFBB14DE0FC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:35:32 +0000 ROA not before: Wed 04 Feb 2026 22:18:38 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 4594 IP address blocks: 43.225.100.0/22 maxlen: 22 43.225.100.0/24 maxlen: 24 43.225.101.0/24 maxlen: 24 43.225.102.0/24 maxlen: 24 43.225.103.0/24 maxlen: 24 103.44.61.0/24 maxlen: 24 2407:880::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1801 (0x709) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183BBC, serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D Validity Not Before: Feb 4 22:18:38 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a46ad4-5d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:1d:3d:62:28:e9:15:b3:76:37:81:b8:6d:46: 7b:d5:02:1d:6b:ab:95:a7:95:5b:48:49:30:28:f0: 16:1a:be:dc:33:e2:e3:3c:69:f2:6e:31:c7:5e:c3: 39:4f:1b:42:7f:5d:a9:3c:32:6a:8f:0b:df:a4:f0: 24:33:5f:01:5d:ec:82:e7:a1:a1:44:b7:24:af:c5: ed:20:56:2e:78:2b:d1:bb:db:fe:95:77:44:12:c6: ab:06:1f:33:35:21:b2:9d:03:68:89:8e:3c:da:dc: 74:55:75:db:75:b7:67:20:41:c9:27:39:8f:fc:4e: 28:12:a3:52:bb:f6:81:a9:d0:5f:11:9a:3d:42:05: ea:8d:cd:62:42:13:91:6f:e0:64:c9:3a:ff:c1:c6: bb:47:9c:74:9f:8e:6c:3c:9e:b2:16:35:88:dd:5a: a0:02:82:8c:bf:6e:2f:2e:c6:e1:7f:62:74:0b:a2: f9:50:0e:c7:8e:8e:f2:2e:09:fd:58:d9:e2:41:8b: 90:13:c3:39:8e:d4:bb:12:65:df:c0:ad:db:8f:79: 04:6b:a5:57:31:b9:60:f7:01:cd:18:1d:d5:ac:cf: 71:b7:49:96:87:fc:c3:a0:c4:91:ae:55:37:30:94: 8d:cd:81:eb:18:46:6c:4e:76:1b:7a:f4:20:de:7d: 2a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B3:24:0B:53:6E:02:D3:89:07:5B:C3:A8:43:31:30:35:45:95:5F X509v3 Authority Key Identifier: keyid:06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/E4205416B2F111EFBB14DE0FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.225.100.0/22 103.44.61.0/24 IPv6: 2407:880::/32 Signature Algorithm: sha256WithRSAEncryption 29:9f:89:6f:c3:07:f8:0a:db:a0:1e:4b:32:6d:17:30:a5:e0: 98:b4:bf:4e:a5:e9:8d:3a:e1:7f:bd:18:c5:b6:f7:79:dc:39: ef:ac:df:10:2b:6a:fa:6c:83:dd:0b:72:ff:bc:8e:80:39:1b: 56:b4:09:55:2a:24:af:22:f0:34:42:ce:5a:7d:c7:3c:20:41: 8a:fe:70:92:84:f5:73:39:d4:50:fe:f9:60:bb:75:7f:68:a6: d7:a0:5e:a2:9a:16:ff:4c:5e:83:ae:58:42:f0:03:cb:f6:44: 98:18:a9:ca:6a:b3:93:cd:a9:5a:fa:33:91:18:f6:8e:0e:5c: 07:08:fc:8f:b1:95:16:24:fe:3b:f2:a8:0e:ae:91:e1:f4:02: ba:52:ec:af:9d:e2:3f:15:e4:f9:1e:e0:4b:fa:a1:85:e5:f8: 24:aa:c7:19:78:bb:0c:fa:e3:73:6d:91:af:5c:83:3d:9f:9a: 79:ab:3c:8c:62:d3:c4:b8:53:9f:c7:91:04:c1:67:b0:8d:b1: 75:7a:1a:67:26:4f:5f:cc:50:a2:bb:a0:19:4f:90:a3:10:d3: fe:16:e4:05:af:ba:7d:b0:fb:78:05:b7:36:a0:24:a1:13:ea: 5b:3c:e6:bf:5f:73:5c:66:68:a5:bc:be:ff:4d:a9:8f:da:86: ad:3a:86:1e -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICBwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCQkMxMTAvBgNVBAUTKDA2MTgxODQ5RTJDNUY5MzEzRUE2MEEzMzk3REM2MTQ3 MkFDMTFCMEQwHhcNMjYwMjA0MjIxODM4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmFkNC01ZDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9x09YijpFbN2N4G4bUZ71QIda6uVp5VbSEkwKPAWGr7cM+LjPGnybjHHXsM5 TxtCf12pPDJqjwvfpPAkM18BXeyC56GhRLckr8XtIFYueCvRu9v+lXdEEsarBh8z NSGynQNoiY482tx0VXXbdbdnIEHJJzmP/E4oEqNSu/aBqdBfEZo9QgXqjc1iQhOR b+BkyTr/wca7R5x0n45sPJ6yFjWI3VqgAoKMv24vLsbhf2J0C6L5UA7Hjo7yLgn9 WNniQYuQE8M5jtS7EmXfwK3bj3kEa6VXMblg9wHNGB3VrM9xt0mWh/zDoMSRrlU3 MJSNzYHrGEZsTnYbevQg3n0qIQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFLizJAtT bgLTiQdbw6hDMTA1RZVfMB8GA1UdIwQYMBaAFAYYGEnixfkxPqYKM5fcYUcqwRsN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0JCQy8xNDBDMTc1Njg2 RDYxMUVCQjdCMzlDNjJDNEY5QUUwMi9CaGdZU2VMRi1URS1wZ296bDl4aFJ5ckJH dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JoZ1lTZUxGLVRFLXBnb3psOXhoUnlyQkd3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODNCQkMvMTQwQzE3NTY4NkQ2MTFFQkI3QjM5QzYyQzRGOUFFMDIvRTQyMDU0MTZC MkYxMTFFRkJCMTRERTBGQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK+FkAwQAZyw9MA0EAgACMAcDBQAkBwiAMA0GCSqGSIb3DQEBCwUA A4IBAQApn4lvwwf4CtugHksybRcwpeCYtL9OpemNOuF/vRjFtvd53DnvrN8QK2r6 bIPdC3L/vI6AORtWtAlVKiSvIvA0Qs5afcc8IEGK/nCShPVzOdRQ/vlgu3V/aKbX oF6imhb/TF6DrlhC8APL9kSYGKnKarOTzala+jORGPaODlwHCPyPsZUWJP478qgO rpHh9AK6UuyvneI/FeT5HuBL+qGF5fgkqscZeLsM+uNzbZGvXIM9n5p5qzyMYtPE uFOfx5EEwWewjbF1ehpnJk9fzFCiu6AZT5CjENP+FuQFr7p9sPt4Bbc2oCShE+pb POa/X3NcZmilvL7/TamP2oatOoYe -----END CERTIFICATE-----Generated at Mon Mar 2 17:41:20 2026 by rpki-client